This Privacy Policy describes how CoachCamp (“CoachCamp,” “we,” “us,” or “our”) collects, uses, and shares information when you use our mobile app, our website at coachcamp.app, and any related services (collectively, the “Service”).
We wrote this in plain English wherever possible. If anything is unclear, email us at support@coachcamp.app.
1. Who we are
CoachCamp is a fitness coaching app operated by Coach Camp LLC (the “Operator”). The Service connects fitness coaches with their clients (athletes) and provides tools for programming workouts, logging training, tracking nutrition, and reviewing progress.
For users in the European Economic Area, United Kingdom, or Switzerland, the Operator is the data controller for personal data processed through the Service. You can contact us about privacy requests at support@coachcamp.app.
2. Information we collect
2.1 Account information
When you create an account, we collect your email address, display name, and the role you choose (coach or athlete). Authentication is handled by our identity provider, Privy, which supports email and SMS one-time codes as well as Google, X (Twitter), and Apple sign-in. If you sign in with a third-party provider, that provider may share your name and email with us so we can create your account.
2.2 Workout and training data
When you use the Service to log training, we collect the data you enter, including programs and templates, exercises, sets, reps, weights, rate of perceived exertion (RPE), body weight, and per-body-part training volume. This data is stored on our hosted database (Supabase, located in the United States).
2.3 Nutrition data
If you use the nutrition features, we collect the meals, calories, and macronutrients you log, as well as any nutrition targets your coach assigns to you.
2.4 Apple Health data
With your explicit permission on iOS, the Service can read selected data from Apple HealthKit, including steps, heart rate, active energy burned, completed workouts, and body mass. This data is used only to display your activity inside the app. Apple Health data is not transmitted to our servers and is not shared with your coach or any third party. You can revoke this permission at any time in iOS Settings › Privacy › Health.
2.5 Photos
If you upload progress photos, those images are stored in our hosted file storage (Supabase Storage, located in the United States) and are visible to you and, if you have an active coaching relationship, to your coach. We do not use your photos for advertising or model training.
2.6 Payment information
Subscriptions on iOS are processed by Apple via In-App Purchase. Subscriptions on the web are processed by Stripe. We never receive or store your full payment card details. We receive only the information needed to manage your subscription, such as a customer identifier, the product you purchased, and your subscription status.
2.7 Coach–client relationship data
When an athlete accepts a coaching invitation, the coach is granted access to the athlete’s workout logs, nutrition logs, progress photos, check-ins, and any notes the athlete shares through the Service. We record the existence of the relationship, when it was created, and when it ends.
2.8 Device and log data
Our backend records standard server logs (such as IP address, request path, timestamp, and error codes) for security and debugging. We do not currently use any third-party analytics, advertising, or behavioral tracking SDKs (no Google Analytics, no Mixpanel, no Facebook Pixel).
3. How we use your information
We use the information we collect to:
- Provide and operate the Service, including authentication, syncing your data across devices, and showing your training and progress;
- Enable the coach–client relationship you opted into, so your coach can review your data and prescribe programs;
- Process subscription payments through Apple or Stripe and manage your subscription status;
- Communicate with you about your account, security alerts, and important changes to the Service;
- Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
- Comply with legal obligations.
We do not sell your personal information. We do not use your training, nutrition, photo, or health data to serve you advertising.
4. Who we share information with
We share information only with the service providers we need to run the Service, and only to the extent necessary:
- Privy— identity and authentication (email, phone, OAuth tokens). See privy.io/privacy-policy.
- Supabase— database and file storage in the United States (account profile, training, nutrition, check-ins, photos). See supabase.com/privacy.
- Apple— In-App Purchase processing and receipt validation for iOS subscriptions.
- Stripe— payment processing for web subscriptions. See stripe.com/privacy.
- Your coach (if applicable)— if you accept a coach invite, that coach can view the workout, nutrition, check-in, and photo data you log within the Service.
We may also disclose information when we are required to by law, subpoena, or other legal process, or to protect the rights, safety, or property of CoachCamp, our users, or others.
If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
5. Coach and client data sharing
CoachCamp is built around the coach–client relationship. When you, as an athlete, accept a coaching invitation:
- Your coach can view your assigned programs, completed workouts, set logs, body weight entries, nutrition logs, check-ins, and progress photos.
- Your coach can prescribe new programs, edit your assigned program, and message you within the Service.
- Your Apple Health data is not shared with your coach.
- You can end the relationship at any time from your profile, after which the coach will lose access to data created after the end date. The coach may retain copies of historical data they have already viewed.
Coaches are independent third parties who use CoachCamp to deliver their services. They are responsible for their own use of your data and should provide you with their own privacy disclosures where required by law.
6. Data retention
We retain your account and training data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain certain records (for example, transactional and tax records) for longer periods under applicable law. Backups are rotated and purged on a rolling 90-day cycle.
7. Your rights
You have the right to access, correct, export, or delete the personal data we hold about you. You can:
- View and edit most of your data directly in the app;
- Request a copy of your data (data export) by emailing support@coachcamp.app;
- Delete your account from the Profile screen in the app, or by emailing us;
- Withdraw consent for Apple Health access at any time in iOS Settings.
If you are in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR / UK GDPR, including the right to object to processing, the right to restriction, and the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to know what we collect, the right to delete, the right to correct, and the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share personal information as those terms are defined under the CCPA.
8. Children
CoachCamp is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us personal information, please contact us at support@coachcamp.app and we will delete it. Users between 13 and 18 should use the Service only with the involvement of a parent or legal guardian.
9. Security
We use industry-standard safeguards including TLS in transit, encryption at rest on our database and storage providers, scoped row-level access controls, and short-lived authentication tokens. No system is perfectly secure, but we work to keep your data protected and to notify you promptly if a breach affects your information.
10. International transfers
CoachCamp is operated from the United States and our database and storage providers are based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection rules different from your home country.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes, we will notify you in the app or by email before they take effect.
12. Contact us
Questions, requests, or complaints about this policy can be sent to support@coachcamp.app.